.php会员登录权限和超时退出

config.php

 

<?php
session_start();
$conn = @ mysql_connect("localhost", "root", "") or die("数据库链接错误");
mysql_select_db('menber',$conn);
mysql_query("set names 'GBK'");
define(ALL_PS,"php100");

 function user_shell($uid,$shell,$m_id){
  $sql="select * from user_list where uid= '$uid'";
  $query=mysql_query($sql);
  $us=is_array($row=mysql_fetch_array($query));
  $shell=$us ? $shell==md5($row[username].$row[password].ALL_PS):FALSE;
  if($shell){
    if($row[m_id]<=$m_id) {
    return $row;
    }else{
   echo "你的权限不足";
    exit();  
      }

  }else{
   echo "你无权限访问该页";
   exit();  
  }
 }
 
 
 
 function user_mktime($onlinetime) {
 
  $new_time=mktime();

  if($new_time-$onlinetime>'10'){
   echo "登陆超时";
   exit();
   //session_destroy();
   }else{
   $_SESSION[times]=mktime();  
   }   
 }
?>

 

 

user.php

 

<?php
 include("config.php");
 
 if($_POST[Submit]){
  $username=str_replace(" ","",$_POST[username]);
  $sql="select * from user_list where username= '$username'";
  $query=mysql_query($sql);
  $us=is_array($row=mysql_fetch_array($query));
  
  
  $ps= $us ? md5($_POST[password].ALL_PS) == $row[password] : FALSE;
  if($ps){
   $_SESSION[uid]=$row[uid];
   $_SESSION[user_shell]=md5($row[username].$row[password].ALL_PS);
   $_SESSION[times]=mktime();
   echo "登陆成功";
   }else{
   echo "登陆失败";
   session_destroy();  
  
  }
   
 }
?>

<form method="post" action="">
  <p>用户名：
    <label>
    <input name="username" type="text" id="username" />
    </label>
  </p>
  <p>密码：
    <label>
    <input name="password" type="password" id="password" />
    </label>
  </p>
  <p>
    <label>
    <input type="Submit" name="Submit" value="提交" />
    </label>
  </p>
  <p>&nbsp;</p>
</form>

 

 

 

user_sys.php

 

<?php
 include("config.php");

    $arr=user_shell($_SESSION[uid],$_SESSION[user_shell],1);

user_mktime($_SESSION[times])
 
?>
权限内容